How can we catch the Error: Invalid signature exception within MultiSamlStrategy?

[jeff-pal]

If we have an invalid certificate in done(null, provider.configuration) we get a Invalid signature exception. I'd expect to catch that exception but I'm not sure where it does throw the exception. So how can we handle that error?

passport.use(
  new MultiSamlStrategy(
    {
      passReqToCallback: true, // makes req available in callback
      getSamlOptions: function (request, done) {
        findProvider(request, function (err, provider) {
          try {
            if (err) {
              return done(err);
            }
            return done(null, provider.configuration); // <------------- The error source
          } catch (e) {
            console.error(e.message); //  <------------- I'd expect to catch the error here
          }
        });
      },
    },
    function (req, profile, done) {
      // for signon
      findByEmail(profile.email, function (err, user) {
        if (err) {
          return done(err);
        }
        return done(null, user);
      });
    },
  )
);

[cjbarth]

You should be getting an Passport error, so you would handle it that way. Perhaps this helps. See this too. This will typically be handled by Express and in the typical Node-back style.